created only_allow helper
fixed bug and updated version