add required :password field to user#create requests in event tests
user#create route is still /new (not /create, yet)
use the validate-event-response helper function in the test correctly
add component arg to a few places that were missed in large-scale changes
remove :put routes because they're not being used (yet)