removed before_filter authentication for create to see if it helps with 422