If I remove the leading slash from the path definition for events, I get:
{ “error”: “Requested endpoint is forbidden” }