bug fix: require user to be logged in for operations with basket