api authorization for Event and User resources fix