added csrf protection for cart items
moved checkout button to bottom