Force security for access to the whole Api. Use ajax=true feature to
obtain HTTP 401 Unauthorized response status instead of page redirect.
The page redirect is done client side with AngularJS / Restangular error
interceptor and currently leads to the same login page as would have
done SecureSocial automatically without specifying ajax=true, but in the
future a custom AngularJS login page will be used instead.