[MIE-1633] Validate create activities only for the current user

Add validation to allow POST to create activities only for the current user
good catch