added clientaccesspolicy.xml