changed cancel so it is privileged based on whether a patient can book an appointment vs overbooking an appointment; some refactoring of injecting these parameters into scope