more defensive coding for create callback on CRUD controller