use cancan for visibility in order#show
convert carriers to strings to pass validations

why did this stop working?
Merge pull request #5 from stephancom/master

patch carrier validation