title: Cakephp 2.3 $this->Auth->allow() is not working as expected
body: <p>I'm trying to use the AuthComponent in CakePHP 2.3 but it's not behaving the way I would expect it to.</p>
  
  <p>Basically, when I do</p>
  
  <p>$this->Auth->allow('view');</p>
  
  <p>The user is only supposed to have access to the view method, which is what is happening so great.</p>
  
  <p>The problem is, when the user logs in, he suddenly has access to the 'add' method as well (my only other method in the controller at the moment. When he logs out, he doesn't have access to add anymore. </p>
  
  <p>Here's my code:</p>
  
  <p>//AppController</p>
  
  <pre><code>&lt;?php
  App::uses('Controller', 'Controller');
  
  class AppController extends Controller {
  
  public $components = array(
      'Session',
      'Auth' =&gt; array(
          'authenticate' =&gt; array(
              'Blowfish' =&gt; array(
                  'fields' =&gt; array('username' =&gt; 'email', 'password' =&gt; 'password')
              )
          )
      )
  
  );
  
  public function beforeFilter() {      
    $this-&gt;Auth-&gt;deny('add');
    $this-&gt;Auth-&gt;allow('view');
  }
  
  }
  </code></pre>
  
  <p>My PagesController is simply this:</p>
  
  <pre><code>&lt;?php
  App::uses('AppController', 'Controller');
  
  class PagesController extends AppController {
  
  public $uses = array('Pages');
  
  public function view($id = null) {
         echo 'In view';
      }
  
  public function add($id = null) {
         echo 'In add';
      }
  
  }
  </code></pre>