update test to detect another bug
fix `payin()` to flag which participants we actually have card holds for