fixed some routes. admin can now visit orders/show page