on checkout form, check if user is authenticated, not if user exists