wip: group inquiries and booking

src/Controller/Groups/OfferController.php

@@ -34,6 +34,10 @@ class OfferController extends AbstractController
         }
 
         if ($request->isMethod(Request::METHOD_POST) && $booking->isInquiry()) {
+            if (!$this->isCsrfTokenValid('accept_accommodation_offer_'.$booking->getUuid(), $request->request->getString('_token'))) {
+                throw $this->createAccessDeniedException('Invalid CSRF token.');
+            }
+
             $this->bookingService->acceptBooking($booking);
 
             return new RedirectResponse($request->getUri());