We get `creatorId` from the request in every method in https://github.com/Prisma/api/blob/develop/app/Http/Controllers/StoryController.php, we should parse this from the JWT in the Auth header instead