Implemented the user-checks in the controllers and added a lot of comments.
Changed param-names of some functions (like id -> eventId) for consistency.