renamed AllowAll() to AllowAnything()