Authenticate user for new/create action only