Issue #12 - OAuth policy: apply OAuth policy. Add header for token and check policy instance in PDP.