fixed order controller bug when user not valid