fix for ThreadLocalVariablesKeeper, allowed actions added to rest controllers