spree/spree — pull request #2492 by homakov (2013-01-26 07:18:01+00:00)
Title: Stringify api_key

By default there is no api key generated. I just managed to break into api on test installation using `?token[]`, one of my favourite CVEs
@radar, please take a look at Mr. Outsider's PR