policies and authentication addition