I'm not quite clear about the semantic of your "accept" action.
What does it actually do? On the one hand it seems it updates the order state. It should be then idempotent since further updates should not change anything.
On the other hand you have some kind of external state (order is taken). This can't be done through REST, you have to use some kind of unique id to resolve the conflict. Look at this question for more info.