fixed auth security error on create new order