moved payment_demo routing to dev only
PaymentControllerTest now uses FunctionalTestCase
added additional fields to order
added tests for payment order ownership
implemented order ownership checks
Merge branch 'payment'