If omitted, a 16-char URL-safe code is generated. Stored lowercase.
Maximum redemptions. null = unlimited.
null = never expires. Must be timezone-aware if provided.
Successful Response