Fix mass-assignment. Dont allow users w/o access to create team