ng-directive: auth(login&logout)