Correct names in policy spec.
Fix routing.
Set authorization header correctly.

We no longer need the AdminJournalAdapter to make auth requests.