[FIX] don't require login for can_auto_ship route, and return true if there is no current order