Added treatment to get cart only from session and ignore the param from
post, this way one user canot access other user's carts