Add DEBUG statements to show when access has been denied and why.