addactivity can create Activities even if User is not authorized

[white-gecko]

Sending a request to the addactivity action of the ActivityController without being logged in creates a new activity if the actor is specified correctly.
A check if the current user is authorized for this action should be introduced.