uses standard rest path for approving/ rejecting events
added comment explaining remove of security check for approve/decline event methods