Core/Mails: Fix exploit that allowed to take COD items without paying