added client credentials invoke script
added XSL policy sample