updated permissions system

and fixed booking plugin