store: Don't allow id in create requests

This fixes #82.
Update CHANGES to detail changes in 0.11.2