ask for auth only in add to cart