[INTERNAL][CORE] Adds security check for received activities

[srossbach]

trafficstars

It was possible to impersonate yourself as another session user (required a custom modification).