update shopping cart

support:
buy product
checkout (not yet persist in DB)
k