checking auth on user create
added authentication to creation routes