Correct terminology inaccuracy. By default canceling transaction
requires regular cashier password
Move E2E credentials out of MercuryE2E.php and into $CORE_LOCAL
Lane: Synchronizer Token Pattern via FormLib
Not actually concerned about CSRF given environment restrictions,
but it's a potential way to catch double form submission. Proof
of concept with adminlist.php.
BUGFIX: hard error when using integrated EBT Food and foodstamp
total is zero. Cashier cannot bypass.