Because there might be users that pay via external methods (and don't have Payment records)
we can't check only the Payments table. Instead we assume that a credit/award transaction
is enough to consider the user a "paying user" for purpose of the rate limit.

./phpunit