working file upload.
updated user authorization for events.
Updated associations and authorization by implementing nested routes.