Is the issue can be usage of allow="payment *" and not allow="payment"