allow all users to create pipeline requests
trying to figure out why the deny_access method is called in production