require login to create/edit/delete events