Fixed a bug in Authorization layer

Now the _denyAccess method will not be called upon the first miss-match
of the mappings and req.path. It will wait until the loop to finish
examining the mappings array.