fix bug where new orders weren't getting the current user's id