Fixes minor bug and bumps version to 0.1.1.

The code was calling `return PermissionDenied` rather than `raise`,
which caused valid behaviour (site access denoted), but threw a 500
rather than a 403.