added sessionId check to EventService.getEventById; refactored
PublicUser.UserEvent and PublicEvent.EventUser so that both nested
classes contain an attends flag.