WEB:  secure access to addVoucher, uses username and password
WEB: addVoucher moved to public coz json parser has url prefix public
IOS: voucher updates the count with a dummy event_id, 10;
IOS: real event id for addVoucher
IOS: tidy up