order query via token

[devasia2112]

This issue is not quite an issue but and enhancement to the system. After thinking a while, it would be easier to the client to check orders using a token instead of log in into the system.
The client area will coexist with this new feature and should not be removed.

To do so, we need to implement a rest API using only GET as method request because we just need to retrieve the resource from the server. We are not going to create/edit/update/delete resources with the server.

In the future we can use the same idea to import coupons into the system using POST method, but for now let's stick to this token.