Add authorization tests to Activities controller