Ubercart

A user who is not logged in can see an "Orders" tab when logging in. Clicking the tab once does nothing (goes to http://livetest.ubercart.org/user//orders). Clicking again takes the user to http://livetest.ubercart.org/user/orders/orders where they can see a list of orders. They can't go any further than that (as far as I can tell) but it's still definitely a problem. I don't think a user who is not logged in should be able to see the "orders" tab to begin with and certainly not have access to the path.

Best,
Xerxes