Handled invalid cart_id requests by redirecting to store - and removed car_id from whitelisted params