Post-Thomas Cook: How to protect your holiday