first pass at processing boku callbacks (bug 991581)

* the webpay part of this is in a pull request on my other laptop, will push later
* adds in a boku namespace to urls
* bit naive at the moment, but we can improve as we get closer
* currently doesn't do verification, will add that when that lands