Adding attending data and the ability to toggle this

This makes the attending field actually work for a logged in user, and adds an /attending subresource to an event.  This relates to the currently logged in user.  POSTing to this endpoint marks the user as attending; DELETEing marks them as not attending.