Fix how Auth->allow() is called