Move add policy to the right controller
Separate out "new" controller method
Add some validations to the policy model
Use the same name as Rails usually does
Extract signed in check into a before filter
Move edit division to the correct controller