More expansive policies

[subroseio]

At the moment policies are single resource and single action, it would be easier and more efficient to allow for policies with more than one action and resource. For example:

    policy={
        "policy_id": "customer-service-policy",
        "effect": "allow",
        "action": ["read", "update"],
        "resource": ["collections/user-collection/email", "collections/user-collection/phone"],
    }