update auth lib

Since tcUser is hardcoded in auth lib for now, I cannot set his permissions in test env. So the test may be simple as it doesn't cover all scenarios.
@indytechcook  - This threw me off, because behavior returns ```denied``` as opposed to ```allowed```.

It's a larger change, that we can put off until after the 0.1 release, but ideally this method name is changed to something like ```hasPermission``` and the logic changed to return ```true``` if the user has permission else false. Calling logic would need to be inverted as well.