changed accessPolicy on handlers to make signalr work