add load and authorize in order_page controller