Update syntax for getting events via bucket id
Update syntax for getting buckets via user role
Don't use security infront of API routes
Create events via API endpoint /api/events