Add RecordNotFound escape for users attempting to access a non existent cart, also remove cart id from params to prevent users accessing other people's carts