New features

Added control for who can vew medals in profile
Added option to edit event image from ACP
Added permission to add/edit medals
Update SQL queryes

None