added callback.html
added callback.html for real this time. Apparently you have to have a hosted domain to work with the api so I'm moving this to the vps