User allowed attr only in orders controller [api]
Fix orders controller specs [frontend]
Fix frontend controllers spec build
Readd capybara 2 config
Readd valid noimage/mini.png file