form creation with user authentication