Fix JSON API to return an object for /config/allow-from

Can't return arrays for stuff that isn't a collection.
Merge pull request #1280 from zeha/allow-from-api-fix

Fix JSON API to return an object for /config/allow-from