You don't have the "Restrict Access to Page" server behavior applied on the products_results.php page.. You need to apply that server behavior on any page you want restricted to force someone to log in before viewing it.
The checkout page had html code on the top of the page in the php area. I've moved it down on the page so it should be corrected.