Changes request.body.loanId to request.params.loanId & request.body.url to request.url
Merge pull request #34 from arkadyp/routerBugfix

Bugfix in loan_service.js; corrects typo
modified schema to accept undefined user inputs
Added ng-sanitize
Created a sanitizing service
Sanitized login routes
Generalized Sanitizer