Use CakeRequest::onlyAllow() instead of CakeRequest::is()