tickets: Make sure ticket is paid before it can be viewed
store: Move transaction SHA1-generation elsewhere.