revised flow and cart service, API res endpoints and validation