Fixed error where user#create was being filtered for unauthorized users.