users may not delete paid orders; issue #8