remove allowAction method in controller