this show route should fetch an order like this

```Order.where(:user => current_user).find(params[:id])```

We also need a before filter to ensure the user is logged in, etc.

Tomorrow I'll also show you a better way to wrap up some of the query bits so where(:user =>...) doesn't bleed all over the place