fixed: logged out users can attend full slots