create getByOwnerId method for tokens and test
bring usage up to speed, make first test pass
policy create now returns a promise