fixed big in payment logic
added redirect to login when session is expired