allowed users to update the cart