1) GET /Pay: the form has a hidden token of 155 characters
<input type="number" data-val="true" data-val-range="Enter a whole number of rup
iah above 0." data-val-range-max="99999999" data-val-range-min="1" data-val-requ
ired="The Amount field is required." id="Input_Amount" name="Input.Amount" value
="40000">
2) POST without the token:
   HTTP 400
3) POST with the token, amount 0:
   message: Enter a whole number of rupiah above 0.
HTTP 200
4) POST to the named handler Check, amount 50000:
   More than the balance of B2938.
HTTP 200
