Create a new Controller with a function lets say status
def status
...
end
And then catch it with a GET
website.com/newcontrollers/status/?id=x&uid=xxx&token=
The other way could be to add a new function in the Offers Controller and exclude it in the authentication.