Use GET route for paypal_express_url to fix random CSRF issues reported by @dpritchett & co