moved db operations and validations to server side, improved payment system, fixed timer bugs