Factored out policy list evaluation
Added SimpleAuthorizer