root to orders#show, and redirect_to sessions#new unless logged_in