Add allow field to form
Add access_denied error when user deny form
Remove useless todo