Attach CSRF token to ajax requests
Call buttons 'buttons' instead of menus
Add http basic authentication and associate User and Transaction