Fix isAllowed, if not authenticate