allow updating cart