api: implement update order api