Revert "minor cleanup: iterating over array using `for x in y`"

This reverts commit 301dfe9e2007a686fdc9bbfa3ca8c5f6f50302ec.
See: https://github.com/witoldsz/angular-http-auth/pull/48