added check on user capabilities for ajax requests for adding/deleting members to events