1) made server side, so can't be blocked by the client

2) only made to prompt people to update their payment info if needed