1) the payment form, not logged in
HTTP 302 -> /login?next=%2Fbills%2FB2940%2Fpayments%2Fnew
2) the login page, then a login WITHOUT its hidden token
HTTP 200
HTTP 403
3) the same login WITH the token
HTTP 302 -> /bills/B2940/payments/new
4) the payment form, logged in
HTTP 200
value="18000"
5) a transfer of 10000 without a reference
HTTP 422
Enter the payment reference (QRIS number or bank &#x2B; transfer number).
6) the same transfer with the reference
HTTP 302 -> /bills/B2940
7) the page the browser is sent to
HTTP 200
Payment for B2940 saved.
