store: Don't allow id in create requests

This fixes #82.