Based on locations specific site, i want to add a policy to the common template which already has common components.Can this be done by adding multiple cq:policy be added to the template?

In the anonymous user POST calls, i want to enable the CSRF token. However its empty, {} in the publish instance of AEM 6.3. I have added the configurations mentioned in the below link, but it is not working.Adobe Experience Manager Help | Understanding Cross-Origin Resource Sharing (CORS) with AEM ...