added admin authentication on bookings