Restrict users API endpoints to use integer IDs

Closes #2267

See merge request !1156