added a secure order controller for testing purposes