extend range of status allowed/denied

see https://github.com/strongloop/loopback/issues/301
Yes, that was my first thought too when I saw this code. This line is going to be changed by #15 anyway.