restrict creating new outfits to logged in users