we are forcing created_by to the currently authenticated user no matter what UI sends - in the future there should be an admin role for overrides - should integrate with something like adminjs to make easier for data entry
we are forcing created_by to the currently authenticated user no matter what UI sends