Support only Rails 3.2.16 and above for 1-3-stable

A forced upgrade for people still using 1-3-stable. Don't want them to be hacked because they're using an older version of Rails!
Make sure that api requires authentication by default

Fixes #4096

Conflicts:
	api/app/models/spree/api_configuration.rb