cleaned up demo HTML to validate
experimented with rest
removed replaces in URL, will now be output filters
added various output filters and cleaned up output class
fixed Chrome error with comma or whitespace in filename (when serving)
made epay and paypal more consistent
added content-security-policy violations log
updated config with filters
replaced "#" in base _model class as JSON produced this way could not be tested with SOAP UI
fixed error where sessions could get mixed up