tour creation done excluding user_id, need to do login to complete it