[API] Validate user token when POST record and save real user_id for records.