Renamed CakeRequest::onlyAllow() to CakeRequest::allowMethod().

Existing name is unintuitive and it's not easily apparent what
the method does. Closes #2803