diff --git a/config/policies.js b/config/policies.js
index 8ae7f75..69ca7fa 100644
--- a/config/policies.js
+++ b/config/policies.js
@@ -14,70 +14,21 @@
 
 module.exports.policies = {
 
-  // Default policy for all controllers and actions
-  // (`true` allows public access) 
-  '*': true
+    // Default policy for all controllers and actions
+    // (`true` allows public access) 
+    '*': false,
 
-  /*
-	// Here's an example of adding some policies to a controller
-	RabbitController: {
+    RunController: {
+        '*': false,
+        'find': true,
+        'create': true
+    },
 
-		// Apply the `false` policy as the default for all of RabbitController's actions
-		// (`false` prevents all access, which ensures that nothing bad happens to our rabbits)
-		'*': false,
+    InviteeController: {
+        '*': false,
+        'find': true,
+        'create': true,
+        'update': true
+    }
 
-		// For the action `nurture`, apply the 'isRabbitMother' policy 
-		// (this overrides `false` above)
-		nurture	: 'isRabbitMother',
-
-		// Apply the `isNiceToAnimals` AND `hasRabbitFood` policies
-		// before letting any users feed our rabbits
-		feed : ['isNiceToAnimals', 'hasRabbitFood']
-	}
-	*/
 };
-
-
-/**
- * Here's what the `isNiceToAnimals` policy from above might look like:
- * (this file would be located at `policies/isNiceToAnimals.js`)
- *
- * We'll make some educated guesses about whether our system will
- * consider this user someone who is nice to animals.
- *
- * Besides protecting rabbits (while a noble cause, no doubt), 
- * here are a few other example use cases for policies:
- *
- *	+ cookie-based authentication
- *	+ role-based access control
- *	+ limiting file uploads based on MB quotas
- *	+ OAuth
- *	+ BasicAuth
- *	+ or any other kind of authentication scheme you can imagine
- *
- */
-
-/*
-module.exports = function isNiceToAnimals (req, res, next) {
-	
-	// `req.session` contains a set of data specific to the user making this request.
-	// It's kind of like our app's "memory" of the current user.
-	
-	// If our user has a history of animal cruelty, not only will we 
-	// prevent her from going even one step further (`return`), 
-	// we'll go ahead and redirect her to PETA (`res.redirect`).
-	if ( req.session.user.hasHistoryOfAnimalCruelty ) {
-		return res.redirect('http://PETA.org');
-	}
-
-	// If the user has been seen frowning at puppies, we have to assume that
-	// they might end up being mean to them, so we'll 
-	if ( req.session.user.frownsAtPuppies ) {
-		return res.redirect('http://www.dailypuppy.com/');
-	}
-
-	// Finally, if the user has a clean record, we'll call the `next()` function
-	// to let them through to the next policy or our controller
-	next();
-};
-*/