added new functionality around alias resources.  Now if a resource has an alias and a user is not allowed to access thsi resource with a particular method the aliases are checked as well.  Only if none of the resources allow the user will the user be rejected