make sure only buyer can see receipt page