Ups - sorry about the errors - I have just upgraded the server backend software, and I have not been through a rigid testing of everything following that - thanks for reporting.

As for the ceptacle.com/cash - I have kept that on on invitation only until I got things cleared with the creditcards - so that is why...

The wallet  is in the localstore of the browser (similar to blockchain.info) this way it is locked to a spicific domain (microbits.com) and hence it cannot be tampered with by an evil mercant. Microbits does not use payment links, but a payment protocol, similar to the one currently being implemented for bitcoin. This means that you send the signed transaction to the merchant leaving it to him to broadcast it. Hence a merchant can use a single btc address and not worry about having a wallet online on his webserver.

Do you have a specific use for such setup right away ?