alter create action to allow api post