Remove product_id from custom variables

Made kinda redundant by itemcode1. Plus, determining product_id from
itemcode1 in postback seems foolproof, while the purchase link could
theoretically be tampered with and product_id changed, leading to
someone buying one product and having a purchase record for a different
product.