Changed `purchases` endpoint to accept a GET