Payment gateway: security updates