adding initial angular.js index page and applying security on all non oauth endpoints