Moved errors into errors.go so that the type can be checked by callees and it's obvious which errors may be returned. Expanded readme with policy building examples. Renamed the shipped policies file as feedback suggested a camelCase name is not Go idiomatic. Made the AntiSamy tests run concurrently to ensure the race detector would detect any data races.