sails.js extended policies