authorization: only admin can see people, edit people + events, create events
authorization: only logged in people can edit past events