PATCH:

Fixed a race condition with the ACL.previous options where the absOldURL was being set to the restrictied URL before the ACL rejected the identity. Causing an infinite loop.