remove admin_policies routes; closes #1207