Add exception to authentication in pins controller for buy and payment_success