diff --git a/app/controllers/orders_controller.rb b/app/controllers/orders_controller.rb
index c4b7ab3..8511919 100644
--- a/app/controllers/orders_controller.rb
+++ b/app/controllers/orders_controller.rb
@@ -1,6 +1,6 @@
 class OrdersController < ApplicationController
   load_resource :user
-  load_and_authorize_resource :order, through: :user
+  load_and_authorize_resource :order, through: :user, shallow: true
 
   def new
     @products = Product.all.for_sale.order(:name)
diff --git a/config/secrets.yml b/config/secrets.yml
index 2c88896..84248ce 100644
--- a/config/secrets.yml
+++ b/config/secrets.yml
@@ -16,7 +16,7 @@ development:
   omniauth_client_secret: blargh
   access_token: "token"
   tab_api_key: "HriaktSIhRaB5CJzD71uLQ=="
-  koelkast_token: ""
+  koelkast_token: "token"
 
 test:
   secret_key_base: 961437e28e7d6055ffaad9cf1f8d614354f57f10cb2d7601c9d6ede72a03b9c9535ad9e63507e3eb31252c4895970a63117493408f2e9a46c7a0c4a5a7836b81