Quick fix.
Adding email address to customer attributes.
Only load subscriptions for the authenticated owner.
Returning unauthorized for bad subscription IDs as well.
Add support for Rails 3.2.