ecash tokens in http headers aren't easier than lightning payments?