is ok! my policy server was broadcasting an initial <newUser id='0' /> welcome packet on connect so this was being received rather than the policy xml, is now fixed!