GET /one-pass — pay and receive
POST /two-pass — send payload, pay, receive