2. In server side use express passport to manage login and acl to manage permissions (configuration in server/config.js)
3. In client side Add HttpAuthInterceptor to trigger login form show when login is needed (try to add new value to the list when login as guest, or open it when you are not login);
5. ACL docs https://npmjs.org/package/acl