Custom merchantref is optional
Do not encode password in the database
Remove unnecessary labels
Implemented postsale request verification