CLC-4229 - /act_as endpoint should only allow uid's that are valid

https://jira.ets.berkeley.edu/jira/browse/CLC-4229
Since we're restricting UIDs to 9 digits or less, random_id used in our tests must also be restricted.