Change the create fuction to be called by the user object

Was getting the following error:
"Can't mass-assign protected attributes:"