Fix frontend checkout feature spec

Remove Rails 3 `without_protection` from ar `create`