Treat 'all_actions' key as the special one in controller methods
Document `all_actions` key for `authorize_actions_for`