only authenticated users may create events