Missing transaction in the StatusMessage controller

The status message is created and then the aspect visibilities are created. If the server dies in the middle, the database is left in a inconsistent state. We have to execute this controller in a transaction.

The diff looks a little bigger than it should. Just two lines were added.