Update vacation creation + improve security