modified policies so that anyone can view menu without being logged in