Add policy  for application
add challenge policies
add task policies
fixed challenge policy (use creator_id instead of user_id)