Security issue for new accounts

Hi,

Great module! I just came accross a potential security issue in this module. I have a web site for members only where members join with invitation.

I observed when a new user wants to joint the site, and the account sign-up screen is presented, the RSVP tab is present and allows access to the RSVP events, even if the user is just a visitor. I only allowed access to 'Own RSVP's for members only.

See URL below (for user '0', unregistered visitors) the content of the RSVP is not denied, but the tab is displayed.
http://www.mysite.com/user/0/rsvp

I think this is a security bug.
Cheers,
Val