Update policies.md

Adding Passport.js link as suggested by @mikermcneil