order controller: don't cancel users whose post-order email fail