check cookie hash and allow admin booking
added impersonation of user settings for admin