diff --git a/app/Http/routes.php b/app/Http/routes.php
index c0aa67eaa7b0..cb22b331938b 100644
--- a/app/Http/routes.php
+++ b/app/Http/routes.php
@@ -68,10 +68,6 @@ Route::group(['middleware' => 'lookup:license'], function () {
     Route::get('claim_license', 'NinjaController@claim_license');
 });
 
-Route::group(['middleware' => 'cors'], function () {
-    Route::match(['GET', 'POST', 'OPTIONS'], '/buy_now/{gateway_type?}', 'OnlinePaymentController@handleBuyNow');
-});
-
 Route::group(['middleware' => 'lookup:postmark'], function () {
     Route::post('/hook/email_bounced', 'AppController@emailBounced');
     Route::post('/hook/email_opened', 'AppController@emailOpened');
@@ -79,6 +75,7 @@ Route::group(['middleware' => 'lookup:postmark'], function () {
 
 Route::group(['middleware' => 'lookup:account'], function () {
     Route::post('/payment_hook/{account_key}/{gateway_id}', 'OnlinePaymentController@handlePaymentWebhook');
+    Route::match(['GET', 'POST', 'OPTIONS'], '/buy_now/{gateway_type?}', 'OnlinePaymentController@handleBuyNow');
 });
 
 //Route::post('/hook/bot/{platform?}', 'BotController@handleMessage');