Respect CanCan.
Update Spree versions listed in README
Introduce attr items to OrderPopulator instance

And pass it to fire_event spree.cart.add call in
OrdersController#populate. It should help extensions to make better use
of that event since they will be able to access the order and the items
populated at the time of the event call