Policies done, isAuthorized eneabled, small fixes Controllers and Routes