ignore unpermitted params and set event ID on attending ajax call

closes #200