Update controller_actions.ctp

In newer versions of Cake the "allowOnly" function doesn't exist anymore, it was replaced by that if.