moved skip_to_confirmation setting to confirm action in controller so that it is only set to true after successful return from paypal. This allows cancel flow to work better