Updated security policy to have no firewall execpt login and site-wide token access