added policies list method
stopped using url params and instead use json body for requests, added new scan method too