1. On my checkout page, the Card Verification Code (CVC) only allows the user to enter 3 digits.  Some CVC's are 4 digits, such as AMEX.  Is this a bug, or is it configurable somewhere?
2. Is there any way to configure checkout to allow the user to select credit card checkout OR email checkout?  We're getting this request a lot.

Thanks in advance for any ideas on these questions.

Mr. Thompson's answer to your question 2. is technically accurate - the payment provider cannot be _configured_ to provide off-site payment as an option.

It can, however, be done.

You would need to develop a modified version of the Authorize Payment Provider, which had an extra button so that customers who press it have their order finalised without taking CC details.

Stuart