token doesn't start with tok_ when using live keys, therefore we have to handle the double call of authorize for standard spree differently