non-auth user must be able to have cart

[jgrubard]

here i think instead of returning null when there is no active order, we create a new order with userId of null, which then will be re-assigned the user id when they create an account