Capture vs authorization: here’s what you need to know