Improved description sanitization, merchantId no longer required.

Description is stripped for illegal characters and length; instantiating a merchantID is no longer required (only necessary for mandates)