updating middleware and cart to handle session based anon users