add action policies and rest routing
took hapi to npm