Add isAuthenticated policy