authentication for all controllers and added users field to Events