edit transaction: id from path instead of form; included in audit table