Added null defaults to action parameters
Check cart item belongs to user when deleting (fixes #1)