Fixed Comments to take advantage of model binding

Reduced number of api calls as there is no need

Used Angular's model binding to add and remove items from list of
comments
Secured the api and restructured the angular ctrls

Many changes made

The api has been secured by using slc loopback:acl and setting the
proper permissions for a user to create, modify or delete their own posts and
comments while preventing them from modifying anyone else's posts or
comments. The ui does not yet fully reflect this change, but that's
coming next.

The angular controllers were restructured to run the necessary methods
through the User model so as to ensure the correct permissions are
applied.
Fix for hole in deleting all comments

Wrote a custom role resolver to check if a user is the owner of a post
before its related comments are deleted.

This is changed from delete being allowed if the post is the owner of
the comments, which is always true when deleting a post, therefore an
api call of delete all comments with a readily available postId could
be called by any logged in user.
Another custom resolver

Comments have to belong to the user who wrote them in order to edit
Fixed issue with updating comments

Comments are now owned by users on the client side instead of posts
which simplifies who can update what. On success, the database updates
from the client. On fail, the client updates from the database.
Fixed UI to show possible links to resources

The UI has been updated to reflect the access control on the server side
Deleted nonexistent acl permission from post
Added logging capabilities

Should obviously have been done *before* the project went live
Modified filter when querying Post

Only includes the username property instead of the entire user model.
This will eventually be replaced by a remote method to further restrict
the data that the api exposes.
Removed route-based login/logout

Loopback angular sdk provides convenient methods to login and logout so
this functionality will not be needed.
Added request info to the logs
Added user-agent logging
Major refactor

Changed global variables to closures commented a few files and got
minifaction to work. Restructured as the project is starting to get
larger.
Added cdn's, hopefully faster now
Added cdn's, hopefully faster now
More refactoring

Using controllerAs to properly scope variables and restructuring code
for readability and maintainability

Adding comments along the way
Refactoring continues

Comments have been moved to their own controller and it and the rest
of the post controllers have been refactored to reflect best practices.
Scopes are well-defined and namespaced and functions are organized.
Index and js readied for prod
Refactoring, commenting and organization

The code was working, now it's pretty and easy to read
Added remote methods to protect users' email

Filtered queries allowed anonymous users to get email addresses of users
with the same permissions as reading a post or comment. This was
eliminated by running a filtered query on the server and not allowing
the client to run such queries.