hotfix: AccessControl->beforeAction() rules check is not interrupted by exception

It might be not a bug, but I don't see how should it work properly right now without this fix.
Maybe it also makes sense to change `} elseif ($allow === false) {` to just `} else {`