added policies for Partner/vendor roles, added FileController and financial pages to policy, added multifile ajax upload to finances