[feature] reworked marking an invoice as paid to secure API