Added a policy to prevent adding things from an anonymous account and to automagically add the "createdBy" field to any model update.