Use SecureRandom.hex to create payload ids
Dry up myer.rb
Add API tests
Stub API for controller tests

By stubbing the API for the controller tests, the controllers
become independent of the HTTP access, and the web mocking is not
necessary there anymore.