Anonymous access to check transaction (bug 956354)

Third party apps need to hit the API to check fulfillment
of a hosted in-app payment.