repair mismatched setting names (ALLOWED -> ALLOW)

Looks like these names were overlooked.