tab/app/controllers/transactions_controller.rb

class TransactionsController < ApplicationController
  skip_before_filter :verify_authenticity_token, :only => :create

  def index
    @transactions = Transaction.all
  end

  def new
    @transaction = Transaction.new
  end

  def create
    @transaction = current_user.outgoing_transactions.build(
      transaction_params.merge(origin: I18n.t('origin.created_by_user'))

    if @transaction.save
      redirect_to current_user
    else
      render 'new'
    end
  end

  private

  def transaction_params
    params.require(:transaction).permit(:creditor_id, :amount, :message)
  end
end