order_id & payment_method_id removed from show route