events controller redirects to root when user is not signed in
changing default to unsecure cookies

troubleshooting heroku issues
set user cookie to be http only