I tried using the shopify_app gem today and found that by default, we only have read permissions for products, however the Home controller index action tries to grab both orders and products.
This caused a 403 error.
This PR sets the api permissions to be able to read both orders and products, so the basic experience doesn't cause an error.
@edward @jnormore can you pull and update gem?
Explicitly set read permissions for products and orders