add credits/pending_clearance + token based auth for TransactionsController & CreditsController