Installed the module and activated the order_management and order views but both are allowing anonymous access to these pages. Rebuilt permissions and didn't seem to solve the problem.