added create service and create order routes with auth and permission functionality and menu visability based on role