[MIE-1633] Validate create activities only for the current user

Add validation to allow POST to create activities only for the current user
I need a registered user (userId 12) to check that he is actually doing a POST. In this case, we are trying to make a request with an userId 1 (should reject post activity). That is why I set up a fake server.