Adding support for spree_xhr_post, spree_xhr_put, spree_xhr_delete

Fixes #4071
Backend taxon controller now using Spree::PermittedAttributes

Fixes #4069
remove relation from simple scopes as it removes chain scopes query and returns all products

Fixes #4062
Ensure shipment numbers are 11-chars, not 9

Fixes #4063