Users should be able to set things like email, currency or any Order value not dependent on other objects.
curl -H 'X-Spree-Token: 123' -X POST http://localhost:9292/api/orders.json
api/orders.json should be the root path for creating the orders.