Adding auth to event save, and changing error's code to 400