Move with_lock call to Order#update and Order#update_totals so that updater can operate without worrying about AR