added authorization for events