uesd authorization management in events controller with cancan
add test code about authorization management with event