only allows authorized users for event dashboard, and adding a task