Fix CMSBatchActionHandler::$allowed_actions

Regression from earlier API change to deny actions unless specified