Fix security in chat-html-secured example and refactor it to use uri-policy and acl-policy