todo: make sure only one rsvp per user is being made