Checkout Cancel Callback

Handle cancelled checkout.

Until 24 Sep this only redirected. The payments row stayed 'pending' forever, so a user who opened checkout and backed out looked exactly like one whose card was declined — 59 rows, one indistinguishable blob. Mark the row so the two are tellable apart in SQL.