[DO NOT MERGE] Allow customers to create a return authorization through the API

Changes the authorization logic to allow the order’s owner to create a new return authorization.
Good point, changing