Switched to using stringed event pk for order code session storage.
Also implemented clearing of order code from session upon purchase + redirect to canonical order URL.