return false for allow? when token is not found
Merge pull request #137 from thetizzo/master

allow? should return false if no token is found