Can somebody explain how Google was able to index all these checkout pages? Presumably they were only sent over email.
The more likely thing you are experiencing is Google reading your AJAX URLs, either by evaluating JS or by using heuristics. Google is known to do both of these, but a lot of HNers get surprised when I mention it, so FYI.
Also, these features are enabled by default.