Added security policies for api access
Moved addFeed action to DashboardController