[MIE-1633] Validate create activities only for the current user

Add validation to allow POST to create activities only for the current user
Likewise, where is this being enforced in repo?