How to prevent duplicate payment submissions?