Removed token authentication from ExpensesController