double process / back button protection for self-service payments, RT#29168