Rename TW.XSS-ONLY.policy to TW.XSS.policy