using order path instead of current_order, to make things simple and avoid authorization problem when user is not logged in