client: make getCart a function of the user (as admin users don't have carts)