Only create an order when adding a product to cart

Everytime user was authenticated an order was created by visiting any
page in frontend (if none were already associated with the current user)

Fixes #4136