1 - fixed bug inserted in last commit re: foreign URL

2 - modified the way the API controllers find retailcustomerID to handle
client credential based access_token requests.