Validate HTTP API user input

For example, raft indices must be sane integers.
ok, habits are hard to break