no longer showing cancelled events on a user's profile
minor tweak. making event adding form less fragile (now checking permission instead of assuming it)