Update variants_controller.rb

restrict variations to individual products