security of remove/edit cart