You could use the iTransact SOAP API instead of their passback/lookup services. It's probably MUCH more efficient and secure anyway.