Do not save api_key in database

* Always use config.baron.key on retry.
* Rename generateInvoice() to postInvoice()
* Prevent crash in saveInvoice error handler if baron returned invalid JSON.