fixed a bug where /buy did not check for positive amount