Added missing require privileges annotations to OrderService method and new ConceptService methods for getting drugs