Handle exceptions when a cart can't be found.  Also stop accepting the cart ID from the request.  Presumably it's coming from the session now?