adds authorization for booking edits controller actions
adds authorization for booking edit requests controller action