added some readmes, update auth to reject promise if changing $location.url