Added token to booking.
Started with access rules filters on Event Controller