added role authorize to orderhistorycontroller