Added doc for denyAll and permitAll

Closes #100 and closes #178