require event.slug and have api controller take it from params
fix bug in api events controller, didn't accept enough params