Specify userIndex instead of merchantID in payments table

[ty-everett]

This will save room and be more efficient than storing the whole 16-character merchantID, and will allow things like /userr/payments to pull the payments using userIndex from auth without an extra step.