Adding support for denied_paths

Allows for black listing of URL's instead of white listing.

Add some rspecs as well.