fixed broken "repay" link
removed unnecessary allowed_actions on ProductForm