use sina cdn for css and js
refactor templates
set flask debug
validate update permission
use AJAX to update order