creating listing with generated QRs and user auth