Allow assertPermits and assertDenies to take multiple apps

Fixes #21