updating authorization for new event show page