Good tutorial. Noticed that it needs to add /api/ after localhost:3000
On signup or login POST request to /api/user-details throws error 403 (Forbidden). After enabling Create permissions in Roles it works but allows to Create entry without filling up form fields at all. Are there any changes needed in Setting > Roles?