Notes now cannot be added to a cancelled order. #6283

Add before this:

```python
if self.state not in ['confirmed', 'processing']:
    abort(403)
```