Incorrect check in the API when using the authkey in the URL

- check lead to the user incorrectly being passed on after authentication, not returning any private data of their own organisation.

- Also, publishing an event with the background jobs enabled now correctly shows that the job was added to the queue instead of telling the user that the event has been published.
Merge branch 'hotfix-2.2.4' fixes #220 and fixes #221