Gonna try  oAuth
Better response error code treatment in angular app; true permission control in back-end