added endpoint for adding policy to group and deleting a policy