changed so that bookAppointments privilege is required to view the manage appointments page