Oh, and it looks like your system doesn't accept the cancel back through the API. I just get a page that says "The user denied your request."