added order history, cleaned up DB, templates, added logout/register but CSRF fails for login