added authorization to the orders controller and updated the index view