policy facade implementation refactored: parameterized queries added, string constants moved to Strings