extend range of status allowed/denied

see https://github.com/strongloop/loopback/issues/301