Open Payments "Get Incoming Payment" endpoint should return limited results without an authorization header

[AlexLakatos]

For Web Monetized website to be able to check the contents of incomingPayment, the endpoint should return a limited response for unauthorized requests. The current thinking is it should only return rereceivedAmount and ilpStreamConnection.