Only generate MD5 from ePay-only fields

Not well enough documented, but try-and-error shows this is how it works - NOT by making MD5 of ALL fields, but MD5 of ALL ePay fields.
Corrected indention