added authentication to cart controller