title: CakePHP: Auth error, even with allowed actions
body: <p>In my Cake app, I'm doing a basic authentication. I prefer to keep it simple and semantic (don't like ACL) so I'm simply checking a user's role, and allowing or denying accordingly.</p>
  
  <p>Now, the authorization all functions as expected, but I'm getting a weird issue where the Auth error message shows regardless of whether the user attempts an allowed action or not. It remains visible after they've logged out.</p>
  
  <p>Here's the AppController:</p>
  
  <pre><code>public $components = array(
      'Session',
      'Password',
      'Auth' =&gt; array(
          'loginRedirect' =&gt; array('controller' =&gt; 'users', 'action' =&gt; 'index'),
          'logoutRedirect' =&gt; array('controller' =&gt; 'pages', 'action' =&gt; 'display', 'home'),
          'authError' =&gt; "Sorry, you're not allowed to do that.",
          'authorize' =&gt; array('Controller')
      ),
      'RequestHandler'
  );
  
  public function beforeFilter() {
      $this-&gt;set('loggedIn', $this-&gt;Auth-&gt;loggedIn());
      $this-&gt;set('current_user', $this-&gt;Auth-&gt;user());
      $this-&gt;set('admin', $this-&gt;_isAdmin());
      $this-&gt;set('coach', $this-&gt;_isCoach());
      $this-&gt;Auth-&gt;allow('login', 'logout', 'display');
  }
  
  public function isAuthorized($user) {
      if (isset($user['role']) &amp;&amp; $user['role'] === 'admin') {
          return true;
      }
      return false;
  }
  </code></pre>
  
  <p>The beforeFilter and isAuthorized from another controller:</p>
  
  <pre><code>public function beforeFilter() {
      parent::beforeFilter();
  }
  
  public function isAuthorized($user) {
      if ($user['role'] === 'coach') {
          if ($this-&gt;action === 'index') {
              return true;
          }
          if (in_array($this-&gt;action, array('view', 'edit', 'delete'))) {
              $id = $this-&gt;request-&gt;params['pass'][0];
              $this-&gt;User-&gt;id = $id;
              if ($this-&gt;User-&gt;field('client_id') === $user['client_id'] ) 
                  return true;
              } else {
                  return false;
              }
          }
          return false;
      }
      return parent::isAuthorized($user);
  }
  </code></pre>