Added test for the bookingList controller action and added role based access permissions to the environment and booking controllers