fix (api): updates for changes on plaids side

Looks like Stefano's prev PR takes care of the MFA. This PR also includes ability to send options such as "{list: true}".