fixed omniauth CSRF bug?
added paid status
accept pdf