GUI-857

changed policy save to XHR call, added JSON validation