Add spec for unauthed user to view all events