prevent errors on cart.id
prevent access to other people's carts