possibility to cancel payment in admin backend
ignoring empty transactions status change requests
do not verify_authenticity_token when status is called via post