added policy and creating client-side validation