event serializer WIP
turn back on auth for api so tests pass