added 2 new order states: processing and refund
renumbered states
fixed state numbering
not finding customer in session now leads to FORBIDDEN instead of BAD REQUEST to ease debugging
Merge pull request #127 from MediaSapiens/6068_crm_order_states

6068 crm order states