Restrict GET transactions to only return current user's transactions