Standardize API data validation

Define a template for data validation for each request type:
- GET (all)
- GET (single)
- POST (without query parameters)
- POST (with query parameters)
- PUT (without query parameters)
- PUT (with query parameters)
- DELETE

This includes returning the proper values (Not Found vs. Bad Request).
Some of this discussion may overlap with comments in #5.