fix some security ;)
update payment method when user select another payment tab [Fix #53188167]
fix permissions and added a spec
Merge pull request #293 from devton/fix_53188167

Update payment method when user select another payment tab
Merge branch 'master' into fix_minor_bugs