add authenticate exceptions to buy and payment_success in pins_controller