should there be a before_filter on this to make sure that only logged in users can view the show page? Having current_user.events on L5 ensures that people aren't seeing other users' data, just wanted to ask (more of a question than a suggestion)