adds api for order_details, protected by basic auth