remove some alloweds in AppController