fix login test
hide non-working account actions with css
remove private from orders rest url