Lockdown version 0.8.1 has been released!
The session[:access_rights] was being constructed as a nested array structure instead of a flat array structure when a permission had multiple controllers associated to it.
Thanks to Robert Rowland for finding and reporting this issue!
