Forgot to update action_allowed? for destroy_signup