Events controller auth