add link to better ngCloakAuth approach