cart must have user