Rewrote plugin as merchant class and switched to HMAC authentication