Paranoid check - let's be extra careful when setting Transaction status in an unauthenticated GET request
trimmed a couple of line lengths