server: URL decode policy IDs

Policy IDs will be decoded in GET, PUT, and DELETE requests to the
/policies endpoint.  This will enable users to include non-alphanumeric
characters in policy IDs, as well as leading forward slashes, by URL
encoding the path component of their requests.

Fixes #2116
Signed-off-by: Matthew Mahnke <mmahnke18@gmail.com>