replace getting cart data via session with model binding