updated cart page, and add auth