[FIX] website_sale: extra step access rights

Public users were stuck at the extra step during the checkout
process if enabled due to not having the access rights to write on
the sale.order.