fixed issue where cart reserver wasn't properly being updated
fixed issue where old guest id could be left in session
configured authentication and authorization of RailsAdmin (supersedes #977 and part of #975)