REST endpoint for getting order in session