user cannot click create or manage events if CAN login fails