server matches receipt information to record purchase, upgrade page only accessible to unpaid logged in user