Add Order#authorize! and #authorized?
Make sure persisted invalid orders can not be authorized
Always use method accessors instead of []
Do not authorize for some cards on the black list