Some of the odk_logger tests have XForm users with no profile (and hence no authentication to check for), so updated the permission check in create_instance() accordingly