checkout functioning only for authenticated users