Adjust handling of payment event reference

Use empty string, not None.
Fix a few demo template bugs
Show phone number, delivery notes in order dashboard
Ensure email is always cleaned before authentication test