feat(backend): remove payment pointer from url, retrieve it from request query or body#2042