Added :number to attr_accessible for Spree::Shipments.
only show payment source form if source required

Fixes #3195