I added a comment in the create action in the subscription controller to make sure that user doesn't mess around.