return_authorization updates

tweak how force_positive_amount works
get process_refund fully working/tested