Fix ActivityPub following from Ghost

This makes Follow request parsing more robust. Previously, this only worked if the object
was a URI, which is what many platforms send. Now, we can also handle objects here.