protocol and policy revisions

- Rename the receipts message to standing to avoid confusion with the receipt
message.
- Omit fields which can be implied by the recipient.  This is mainly so
implementations can't forget to validate them.
- Add restriction on standing updates causing a peer's ballance to become
negative.
- Change the session identifier to a counter to prevent replay attacks.