user can only view own orders, closes issue #102
Merge pull request #125 from larsonkonr/order_access_control

user can only view own orders, closes issue #102