@csrf_exempt on cancel_booking