new checkout flow for module
version bump and remove callback URL
fix webhook bug

able to get headers in non-apache servers now
fix callback bug - now handles callback req as JSON