Fix for failing authorization when modifying the taxonomy tree

Issue: when modifying the taxonomy tree (create, update, destroy), authorization
is required but fails when Spree::Api::Config[:requires_authentication] is false

Fixes #2659