added UUID to purchase object for more secure final reciept url