Test page fake_ipn, not done.
Various edits - created some very shoddy admin security