only allow logged in member to modify/delete events