Updated README; Added _allowed? matchers to AccessPolicy as specified