Fixed #15, fixed #13, fixed #7, added spring security: two roles admin
and user. Added eventadmin functionality to events. 

Changes not compatible with existing users collection, need to drop
before deploy.