added user checks to event controller actions