avoid hard-coding path of orders api

Fixes #3371
Fixes #3372