extract $cookieStore out of navbar controller. use access token get/set methods in $api service