implementation of access control in angular sample app