make sure users can only create private chats