validate_fingeprint uses payment_id instead params[:id]