Added two more policies, not necessarily required for all users.

They both allow access to API-M functions to everyone including
anonymous users.
Merge pull request #249 from nigelgbanks/7.x-more-policies

Added two more policies, not necessarily required for all users.