Remove some dead code.
Remove admin default allow from AuthManager.
Tidy up and tighten auth rules.

 * Simplify canEditEpisode
 * canCreateEvent and canEditEvent now call canEditEpisode
Make arguments to canCreateEvent optional to control which rules are checked.