Update controller_actions.ctp

In newer versions of Cake the "allowOnly" function doesn't exist anymore, it was replaced by that if.
Merge pull request #10 from Nepeus/master

Update controller_actions.ctp