Add Policies endpoint

Fixes #40, #41, #42