Revert "Remove call to authorize! which is actually not doing anything"

Need to call authorize with :admin to prevent index on Product which is
allowed in the ability here:

https://github.com/spree/spree/blob/master/core/app/models/spree/ability.rb#L57

NOTE: The ability intends the permission for the front_end but it
applies to the back end also.

This reverts commit a1d2e6f018858ad8d7a7b5cdd7f77307962feff3.

Conflicts:
	core/app/controllers/spree/admin/base_controller.rb
	core/lib/spree/core/testing_support/authorization_helpers.rb
Adding additional common Bogus Credit Card Numbers

Fixes #2543
Require spree_auth_devise 1-3-stable in extensions
re-organize spec describe/contexts

Change-Id: I55b0b6fb28c32e36f7d32090b9c86a7811299180
Test case exposing multiple payments being created

Change-Id: I02e66256878254a3a17ca7d7bd742027cf640c39
Delete existing payments on an update

Change-Id: I7bba5b122db37a13d9b097135872b99138dc5c6d
Fix the comment, change logic on when to delete

Change-Id: Iffeed9661826df1d4b1eac179bd0b1e672320781