fix authorization for events and projects