move events controller to api/events