add payment verification and webhook