Every request for new build should require authenticated user. Task model needs to be updated too (link to user instead of string field).