change to cui policy

outer.request:EAP-Message gives a warning when outer context is undefined, outer.request allows to check if we are in the inner-tunnel (see developers mailing list 28th Feb 2013)