How should we stop duplicate webhook charges?