PCI DSS compliance and payment gateway project