finished policy isAuthenticated
bug fix
update npm