added secure directive that is set by route params, elements can be hidden is route passes in secure
added tokenhandler to set relevant auth token in headers for API calls