check if logged in before checking out