Ep6 Creating a policy and adding client-side validation