Create/Edit/Delete orders via the REST API

These commits add PUT/POST/DELETE routes to the `orders` endpoint. This is a work in progress, please do not merge yet :)