clean up

several breaking changes, including renaming policies to authorizers
(again)