Ensure this.locals is set before trying to write to it in email utility.
Refactor auth mechanisms to actually work!
Fix booking create action logic in API.