PayPal's docs lied re. txn id length