diff --git a/src/presentation/routing/order.py b/src/presentation/routing/order.py
index d0cc126..2dae80d 100644
--- a/src/presentation/routing/order.py
+++ b/src/presentation/routing/order.py
@@ -32,15 +32,15 @@ order_router = APIRouter(prefix='/order', tags=['orders'])
             503: {'model': ErrorResponse, 'description': 'Service Unavailable'},
         },
 )
-#@csrf_protect()
+@csrf_protect()
 async def create_order(
         payment_data: CreateOrder,
-        #auth: AuthContext = Depends(require_access_token),
+        auth: AuthContext = Depends(require_access_token),
         command: CreateOrderCommand = Depends(get_create_order_command),
         logger: ILogger = Depends(get_logger),
 ) -> CreateOrderResponse:
-    #o = await command(payment_data, auth.user_id)
-    o = await command(payment_data, '01KPKAFN6J1NJBY15DX8JE2QYB')
+    o = await command(payment_data, auth.user_id)
+
     itpay_error = o.status in (
         OrderStatus.CANCELLED,
         OrderStatus.REJECTED,