CNRL ordered to drain lake and contain bitumen leak