create order may be an API for other modules

I think how this view function is depending on the caller. Using POST
maybe a good choice, but now the items' database is missing, hard to
test