Dont modify _source

Currently we fiddle with _source, which means when we display the raw JSON for an event it isn't actually the raw JSON for the event. This pull takes care of that by moving the flattened version of the doc into _flattened