adding os auth policy