implemented role-based authorization in JS code. updated README
further refined role-based authorization
set up Angular 401 and 404 routes. some comment cleanup