fixed orders controller to allow destroy and update actions