450 create clone api endpoint

closes #450
Is this alice or bob? do they have permissions to add a form to alice profile?