Authenticate user for new/create actions only