Add authorization tests for event delete, update