Exempt m.room.create from auth_events check. Contributed by @eleboucher