Added ability to pass order token in HTTP header as X-Spree-Order-Token

Fixes #4148