adding details about how to setup events authorization