Prevent purchases of inapp on non public app (bug 1043590)

- Add form validation
- Add test
typo: ``is_purchasable()``