routes should be POSTs for security. Also put in a check to ensure th…

…at random people can't fulfill orders that may not ahve been paid for

config/routes.rb

@@ -1,5 +1,5 @@
 Rails.application.routes.draw do
-  match '/fastspring/fastspring_complete', controller: "Spree::Orders", action: :fastspring_complete
-  match "/fastspring/test_fastspring", controller: "Spree::Orders", action: :test_fastspring
+  match '/fastspring/fastspring_complete', controller: "Spree::Orders", action: :fastspring_complete, via: [:post]
+  match "/fastspring/test_fastspring", controller: "Spree::Orders", action: :test_fastspring, via: [:post]
   match '/fastspring/test_form', controller: "Spree::Orders", action: :test_form
-end
+end