diff --git a/backend/src/controllers/auth.ts b/backend/src/controllers/auth.ts
index 8933ed26..df356d0b 100644
--- a/backend/src/controllers/auth.ts
+++ b/backend/src/controllers/auth.ts
@@ -159,9 +159,6 @@ export const session = async (req: Request, res: Response) => {
       sameSite: "lax"
     });
 
-    console.log("Bearer token (Firebase ID token):", idToken);
-
-
     return res.status(200).json({ success: true });
   } catch (e: any) {
     return res.status(401).json({ error: e?.message ?? "Invalid ID token" });
diff --git a/backend/src/routes/transactions.ts b/backend/src/routes/transactions.ts
index 2e4cc2a6..143bbbfa 100644
--- a/backend/src/routes/transactions.ts
+++ b/backend/src/routes/transactions.ts
@@ -203,7 +203,14 @@ transactionRouter.post("/", auth, async (req, res) => {
       return res.status(401).json({ error: "Unauthorized" });
     }
 
-    const transactionData = req.body;
+    const firebaseUid = req.auth.uid;
+    const user = await prisma.user.findUnique({
+      where: { firebaseUid },
+      select: { organizationId: true },
+    });
+    if (!user) return res.status(401).json({ error: "User not found" });
+
+    const transactionData = { ...req.body, organizationId: user.organizationId };
 
     // Basic validation (units and description are optional)
     if (