Added basic access control to restrict access to add/remove payment experiences.