only a signed-in user can proceed to checkout