checking if allowed action for user
converting booking sample app to use auth module