load_and_authorize_resource for create action