[#1421] Ensure that check_access is called on activity_create

Otherwise when disabling the activity streams the action returned before
calling the auth function, which made the auth audit fail
[#1421] Better exception message for auth audit
[#1428] Fix superimposing resource items

This was caused by removing the "This resource has no description"
message in #1302.