я передумал

src/main/java/app/controllers/user/ProfileController.java

@@ -74,9 +74,8 @@ public class ProfileController {
     }
 
     @GetMapping("/buyvip")
-    @CheckWebAccess(auth_method = AuthMethod.STEAM64)
     public ResponseEntity BuyVIP(HttpServletRequest request,
-                                    @CookieValue(value = "steam64", defaultValue = "") String steam64,
+                                    @RequestParam(value = "steam64", defaultValue = "") String steam64,
                                     @RequestParam String buy_type,
                                     @RequestParam(required = false, defaultValue = "") Integer cost) {
         switch (buy_type) {