began implementing the test for carts_controller
  - actions should be done on any record that the user has the ability to perform that action
  - actions should not be done on any record that the user does not have the ability, and errors
    should be created for that cart_record
  - assertions added to each test to assert that setup has been done properly for the user and action
    being tested
  * have not implemented the annotate_records authorize or update behavior in carts_controller
  * some of the tests fail that need fixtures fixed for the user being tested in carts_controller_test
    see the failure message for the setup assertion that is not passing for more details (see above)
  * some tests fail because the behavior being tested has not been implemented in the controller (see above)
ALL OTHER TESTS PASS