Fixed a security issue with cart IDs being changeable by the user in the URI