@RequestMapping(value = "/list", method = RequestMethod.GET)
  public String listOrders(Model m, HttpServletRequest request) {
    HttpSession session = request.getSession(true);
    CustomerDTO user = (CustomerDTO) session.getAttribute("auth");
    if (user.getIsAdmin()) {
      m.addAttribute("pendingOrders", orderFacade.getPendingOrders());
      m.addAttribute("previousOrders", orderFacade.getPreviousOrders());
    } else {
      m.addAttribute("pendingOrders", orderFacade.getOrdersByCustomer(user.getId()));
    }

    return "order/list";
  }