Correctly list ALLOWED_COBRANDS with hash items.

Thanks to Struan for spotting.