payment controller redirect if not logged in