I have limited resources, unlike many of you. But I do my best, and it seems to work.
Using an un-public copy, run it through "as is" in all browsers, pointed at the test gateway servers, so long as the test gateway servers accept data *exactly* the same as the live ones. Repeat in every browser.
Take every page state, view source, use the direct input of W3C validator to validate every.single.page.
Turn Javascript (and Flash, if it's involved, which it rarely is) off. Re-test.
Turn images off. Re-test.
Find as many of the least Internet savvy people I can find (averages between 3 and 7.) Buy them lunch in trade for a test. I go to their location, sit quietly and have them test it twice - once to let them see that I'm not judging their Internet skills. The second time they are more comfortable and the test is more accurate. I like vocal and opinionated people for this, I find those that are old and cantankerous are best. :-)
This is the best part of it, it always comes back with things I thought were clear can be better clarified. Apply changes.
(You're all going to hate this one) I have an old Mac G3 here I have left at OS 9 with IE5 for Mac and NN4. I call these my "acid tests." Yes, there is not a lot of sense in supporting these, but if it survives these, it will survive just about anything. Repeat the first test, JS on, JS off, in both.
Apply changes to the live site, repeat the first test live.
Throughout we have links to contact in the event of user problems, the most often is on the shipping summary page
("your shipping is too high!") When we changed the verbiage to indicate the prices are retrieved real-time from USPS, and a link to the USPS shipping calculator, these stopped.
The last reveals that your road testing . . . is never really complete, nor is your site.
I looked for shipping costs, and they were not readilly available....
there was an option to open an account....
IMO these are tragedies of Shakespearean proportions. Sure, we create "accounts" - using the checkout page and the user info. If they don't enter a password, temporary password is auto-created for them, and is sent to them with their order right under the "check the status of your order" link.
Anything you can do for the customer, you should, things you can't, you make optional, or try to.