Return 400 if transaction update has non-numeric amount
Sanitize input names instead of restrictive validation