appointment/_header is now using the new paths. fixed security warning from brakeman