REST API Two step payment - Authenticate first, confirm later