Use cart contents rather than timestamp to verify IPNs