When our users are purchasing an in-app item they get access to certain features on a webserver. This is done through a http call from app to our server. Is there any way to verify that the purchase has taken place? In theory anyone could claim that they are an app?