verify authorized + cleaned up model
policies
refactoring verify authorized complete