You should be glad your urls are so intuitive that they are easily hackable. Keep it that way and don't change them (breaking stuff is bad). Nobody really ever

You should be glad your urls are so intuitive that they are easily hackable. Keep it that way and don't change them (breaking stuff is bad). Nobody really ever follows links with REST anyway. That idea is nice in theory but it's just too much work in practice.