Add authentication helper methods and enforce authentication

Without this patch each of the event routes is handling authentication
inline.  This is a problem because each route should not need to
duplicate this code, especially as we start to handle more events.

TODO: This makes the specs fail as authentication is now enforced.