Two people were able to submit the Paypal payment form without paying