Added 'BOOKINGS_ROOT' constant in non-secret-definitions
Modified Controller->internalRedirect(). Uses HTTP redirects instead.