SecureNet: Fix order of xml params

SecureNet doesn't seem to pick up the invoice description and invoice
number if they show up after the merchant key.  And they seem to want
the note field after the method field.  Perhaps someday they'll fix this
to not be order dependent.  For now, we'll jump through some hoops.