Two small changes

- email of the user creating an event shown if current user's org ==
  event's orgc

- on export, the check for to_ids will happen outside of the if branch
  that sets extra restrictions of non site admins. Otherwise site-admins
  would accidentally include attributes that aren't iocs.