Intercept server events

Instead of adding all kinds of extra security with weird tokens make sure your events aren’t exploitable so even if they trigger them they won’t do any damage