room / event query handling

if not logged in, add to req.session and get after logging in