limits users to 5 books, configurable in checkoutsController

Obvious smelly code present, will refactor