require `params` parameter for basic_payment_info instead of relying on external definition of params
delete sensitive attributes specifically from form data before posting errored payment