Prevent purchases of inapp on non public app (bug 1043590)

- Add form validation
- Add test
Oh sorry I thought we said that simulated inapps needed parent apps.