it seems safest to have people log into the customer center and pay but my client thinks that's too much work