Todo: disallow viewing user events from non-administrators

[MK-Chris]

Need a new permission to allow / disallow viewing user events (logins, failed logins, password resets) so that non-administrators can't view them.