Fix SupplyOrder permissions

Fixes #1172
Add 'transitions' to jsonapi include_fields

Fix bug preventing multiple json read extenders

some refactoring of read.