seems to be improperly checked in wpsc_get_customer_meta_ajax().  Bug introduced in 82b82b4c5b58adfe831b3a3639d8f14be4240ce7