fixed possible fixation security issue and added hook_uc_cart_after_user_load