add user cancel order;
hide canceled orders; add security improvements;