people shouldn't ever try using that buy_url I think, because you haven't created a solitude transaction? if that's the case I wouldn't return it and would just return say a 204 to indicate success.