removed protected_attributes
added policy files