Several security hardening fixes.
* Don't use create_function.
* Ensure all functions hooked into admin_init are cap-checked.  Props to Mickael at Sucuri for responsible disclosure.
Update readme.
Merge branch 'master' of https://github.com/wp-e-commerce/WP-e-Commerce