orders_controller.rb, move before action of authenticate_user at first
controller under manage namespace, don't have to remain load_and_authorize_resource
Merge branch 'feature/permission' into develop