Maybe time to write a new client for Zuora

A good read (haven't had the opportunity yet, but comes highly recommended from Jon Moter @ Zendesk).

I get it, REST is a complex topic. Too many people think they understand it, and are falsely validated when they bump into other people who don't understand it. Folks everywhere are building RESTish APIs which are basically just RPC + HTTP verbs + Pretty URLs, and as that doesn't seem very helpful they write giant articles explaining why that's not very useful…

Great reading about securing the REST Api