Make sure users can only remove their own events