Use $location.replace to avoid history spam from login redirects

As I am integrating the new `angularFireAuth`, I noticed the back button getting harder and harder to use with login redirects filling up my browser history. I've added `$location.replace()` calls before the redirects to avoid this issue. I'm not sure if this matches your philosophy, but it feels cleaner and more natural to me.