Fix to a serious security vulnerability

- A new pagination rule override in the event index allowed unauthorised users to see private events of other organisations

- same fix as #d1094c92d0 on feature/test