add security checks when posting an activity
Merge pull request #1666 from ORCID/preventEditOtherSources

add security checks when posting an activity