[FEATURE] add validated query parameter to submit payment route

Yes, that's what I'm proposing. And once we get to separating the API from the Express router `getTransactionAndRespond` will be moved, renamed or removed.