create membership only allow existing users