Create/Edit/Delete orders via the REST API

These commits add PUT/POST/DELETE routes to the `orders` endpoint. This is feature-complete and ready to merge.