Allow multiple allow blocks for the same resource

fixes #19