Forcing user to be logged in to check out
Tidying up access control rules