@wip Pass event_uuid as a param to the new controller

* Scope events to the current user only for security