FIX CreateTeam: only administrators can create teams

this is a security fix: anyone could create a team
and add any users and spy their activity and tasks.