Don't send data without user authentication

this commit applies to CRUD modules "event-requests" and "skillsets".