CLUB-560 - API auth fixes

- locale middleware in django should ignore api requests
- events is deprecated, use actions in routes
- set currentUser property for all controllers
- use actions and not events for routes
- currentUser is set at page load now in an initializer, or when the user logs in or signs up
- can now set/get currentUser from controllers other than the currentUserController