[#1421] Ensure that check_access is called on activity_create

Otherwise when disabling the activity streams the action returned before
calling the auth function, which made the auth audit fail
[#1421] Better exception message for auth audit
Merge pull request #1421 from okfn/1421-activity_create-auth-exception

Disabling activity_streams borks editing groups and user