Provide validation for all API input

[jwreagor]

We need to enforce a schema for data being input into the API. Things such as AccountId should never be allowed as input, integers should not be strings, etc. Failing validation should return a proper HTTP status code as well, probably a 400 Bad Request.