Have a proper route for admin use only to create new events
Added additional tests to ensure proper permissions for new event creation