removed ensure_logged in for creating a new user