Add allow_if option for more flexible acess control

Yeah, I didn't want to remove functionality people would be relying on. I thought making `herokai_only` a special case of `allow_if` and `redirect_url` was the simplest way forward. I could also add methdos for `redirect_url` and `allow_if` that check `@herokai_only`, do you think that'd be better?