public function BeforeFilter(Event $event) { parent::BeforeFilter($event); $this->Auth->allow(['add', 'createToken']); }