modification of Auth->allow based on cake update