use a new uuid for success/payment pages, as it's more secure