better stock start/end times
adding xss allowing middleware
adding list_display for Event