authenticated users can add to shopping cart