Simplify and deduplicate Order#merge! implementation

This may be pedantic, but it's probably cheaper to test if `user` exists first, and if it does then check `self.user`.