Added authorization checks on locations, events, and event_types in the admin namespace