updates to almost finish paypal form submission ... curse you CORS!