Remove auth-specific translations from core

These should live in the auth extensions
[api] Fix 1.8 syntax error in countries_controller
Move order population responsibility out of OrdersController

The OrderPopulator class now contains the logic for checking the stock of a variant and then adding it to the order if it's valid

This is intended as a fix for #2341
Must set master to be deleted as well in scopes_spec