Rename event order status.

- request_refund -> refund_pending
- complete_refund -> refunded
Use PUT instead of GET to cancel/refund for security.

GET should be for only read only requests.
Add Timecop to fix time related rspec failures
Merge pull request #531 from doitian/event-order-refactoring

Rename order status and replace GET requests with PUT.