Part III: Orders - Backend - Orders API Routes

[Zezlita]

As a DBA: we also need to connect the database with the API using API routes:

• PATCH /orders/:orderId (**):
  Update an order, notably change status
• DELETE /orders/:orderId (**):
  Update the order's status to cancelled