`/api/orcid/create` is probably more inline with our other APIs