Manage appointments

This should be a callback, not a before_action.