adding security checks for creating transaction (controller)