refactor complex method update in ReservationsController

Is this check no longer necessary? Although it's not possible with our jquery, we should make sure no-one can hack this into breaking the database.