/document/list returns documents even if identity data don't match

[fabienpe]

Identity fields such as given_name or family_name seem to be ignored by the /document/list API. Regardless of their value, the API returns a document list, provided an authentic_source_person_id is given as input.

Expected behaviour: error.
Alternative: API call with authentic_source_person_id parameter instead of identity.