Use entity classes; remove 'admin' from normal view/edit/delete URIs.
booking: status editing had no effect