validates user payment