Creating a new policy for a web application