Fix #758: Ensure all our ActivityPub fetches are authenticated
Closes #758 (closed)
This ensure we fetch AP objects (such as libraries) and audio files using an authenticated actor (either a given actor, or the default system actor when the request is not made on behalf of a user).