Revert "move policies to the root of the webserver"

This reverts commit fc6ddf6e9fafa119c303afd1be5bdbf98dd15091.