Fix allowAll => permitAll