provide status filtering when getting a list of orders

e.g. /admin/orders?status=pending