Adding a refunds controller

@ateixeira could address this? This is the only one thing before I can merge it.