support parameter validation

[tsuz]

Use Case

API layer performs authentication and can add the correct id in the header like such x-header-id: 1234. The path parameter must also have the same ID such as /flights/1234. If not valid, return a non-200 response.

Possibly there are use cases that the JWT token must match the user ID in a /users/{userId}/profile for security.