cleaned up policies, still working on can-add-collabs policy
added can_add_collaborators policy