Simple token-based security for AngularJS