user.save called inside create user auth create method