added multiple items in cart and fixed a security hole