add harvest_object_create action

@amercader , I'm rewriting some of the pdeu harvesters, I'm also trying to add some action functions for the harvesters as I go. I was trying to restrict the auth to just the site user, but it seems sysadmins can do anything anyway. So I just return false all the time. Is this expected behaviour for the auth functions?