Replace finding by params id to current_user id so that one cannot view the account details of another user. Assign user_id and order status when a user logs in