Removed 'secret' because it's really not secret and can be viewed at bitpay.com/invoices/[id]. Added IP-checking logic in /invoices controller (InvoiceController.js)
Invoice service updates registration status to 'paid' now
Paying for a buy-in tournament registration now updates the prize amount successfully!
Validation to prevent prizes or buyins < 100 bits (uBTC)