Add multiple group support to user:logged_in plugin and add user:has_method role='foo.bar'
Fix has_access plugin method