Adds SHERPA lookup to policy creation

This adds a controller to proxy AJAX requests to SHERPA/RoMEO and
infrastructure to display any results during the policy creation
step.