update auth for get /events/