More request validations

[judgej]

We need to make sure we can catch all data validation errors before it reaches the bank API, just for robustness and to keep the remote bank API logs cleaner. This list would be good:

• UUIDs - lower-case UUID4 seems to be the convention here
• Mandatory/optional fields
• Numeric/integer
• String min/max length
• Regular expression, with some common ones:
  • Reference
  • Payee name
  • Account description

[judgej]

The setting of accountUid, addressUid and paymentUid can be moved to the AbstractRequest to remove a fair number of duplications.