fix potential Sripe ID spoofing