Fixed non-authentication on sign in page.  Added policies for security.