added bookings route
added bookings controller
fixed broken test
added logout feature
added unauthorized access