Add current_user_can and better escaping to edd_check_for_download_price_variations()