We no longer store the entire payment method on the session

Because it causes session serialization to fail (the form in the object contains a closure that cannot be serialized).