Ahh, good point. In that case, I think we should take the payment processing code out of the API checkout controller.