fixing policy issue, testing Heroku deployment.
adjusted listPolicy to limit users