Normally these would be part of the acceptance criteria for each task in the rest of the epic, but we've been skipping them because of the accelerated / exploratory way we've been writing the code.

We should add some tests before we get too far, though. Hopefully we can cover at least as many cases as the tests for the old Adyen integration.