use get_object_or_404, import HttpResponse
add csrf_token to new event form