Authorising payments using QR code