Authorization added to order form controller

authorization added… but its not the desired active admin. need help
with this.