create & authorize transaction by token