add policy to current_site controller