fixed links to controller, cleanup, added security check (events view)

fixed links to controller, cleanup, added security check (events view)