Default to `allow_all` True

[GeorgianaElena]

JupyterHub 5 now defaults to allow_all False.

I believe that in order to keep the expected behavior of the tmpauthenticator, allow_all should be True.

The tests haven't picked this up because the MockHub fixture that we're using under the hood for testing actually re-writes allow_all to True.