Step 2: pay with the information from the last URI
The client gets back another URI: http://rest.movies.org/payments/xyz A subsequent GET should give the state of the order.