Only accept string value for resource IDs in request body

[bart-degreed]

We currently allow non-string values, which violates the json:api spec.

Example:

PATCH /articles/1 HTTP/1.1

{
  "data": {
    "type": "articles",
    "id": 1,
    "attributes": {
    }
  }
}