fix some security ;)
update payment method when user select another payment tab [Fix #53188167]
fix permissions and added a spec
Merge pull request #293 from devton/fix_53188167

Update payment method when user select another payment tab