Add inverse_of to models

Fixes #4146
Revert "Make sure that api requires authentication by default"

This reverts commit 3e89c8e52ced3935f74048f288aa9cdc524c88dc.

This is causing issues with the frontend & backend builds that need to be fixed before this commit can be applied.
Add CHANGELOG entry for js responder security fix
No need to call gemspec in common_spree_dependencies

Each component Gemfile already calls it