Fix error for api orders show using the X-Spree-Order-Token header or or...

...der_token param