Add inverse_of to models

Fixes #4146
Revert "Make sure that api requires authentication by default"

This reverts commit 3e89c8e52ced3935f74048f288aa9cdc524c88dc.

This is causing issues with the frontend & backend builds that need to be fixed before this commit can be applied.
Add CHANGELOG entry for js responder security fix
No need to call gemspec in common_spree_dependencies

Each component Gemfile already calls it
set default for api config require_authentication back to true.
skip filters on frontend for coupon_code
bypass the require_authentication setting on backend specs.
this makes no sense IMHO
stub the spree_current_user to make sure there is an admin user for the backend specs.

Signed-off-by: Peter Berkenbosch <peter@pero-ict.nl>
fixing specs that have to deal with proper users and api tokens now.
add spree api tokens to the select2 call and reset the current_user on the product_spec context with custom authorisation.

Signed-off-by: Peter Berkenbosch <peter@pero-ict.nl>
Merge branch 'master' into anonymous-api-calls

Conflicts:
	api/app/models/spree/api_configuration.rb
	core/app/models/spree/classification.rb
	core/app/models/spree/order.rb