Remove 'login: required' from /create etc.