The server signs orders as MD5(SECRET || message).
The secret length is published so you can verify — or extend.
Submit a signed order to receive a receipt. Admins get something extra.
The order is valid when MD5(SECRET || msg) == sig.
Orders containing &admin=true are routed to the admin handler.