refund api done, params validation and https request
fix