create() tested in all cases. create() in service modified: added validation