stripped out bugy auth in Eaters.create