fixed a couple of permissions bugs. Partial refactor of BookingSlots.