createEntity endpoint is now protected.