user cannot go change order total and order_id
Adds authorization to user pages