added matchers exactly_allow_controllers, exactly_allow_actions and exactly_allow_attributes, :all can be used to allow all actions for a controller