https://book.cakephp.org/3.0/en/quickstart.html#enabling-registrations
In this section,
// Add logout to the allowed actions list.
$this->Auth->allow(['logout', 'add']);
This should be…
// Add "add" to the allowed actions list
$this->Auth->allow(['logout', 'add']);
…I think.
Could you fix it?