Create pads via API

This way we can avoid pad creation DoS by defining "editOnly":true
at the pad's settings.json