Improve `ModelView.allows` mechanics.

Check for method availabilty before access rights.
As admins have god permissions - they may get access to nonexistent URLS.
This place seems the best to this check.
Bump version to 0.4.4