log error message
keep return_url on original domain
try again logging errors
use original domain while auth stuff gets figured out
add outcomes tracking
workaround test
add path_prefix to handlebars template
use typhoeus instead of net http for better cert checks
support for insecure api calls when allowed