Add more auth logic to task creation