Payment controller already has the ability to do this, we just need to make an http api. Payment controller will be going away once guac is in so this is strictly temporary functionality.
try not to dig too much into payment controller, its a dummy interface to be superseded by guac when real payments happen, but it has all the stuff we need for this particular feature.