all catch all route so all angular views work. add service to check if user is authorized.