auth state kept in rootScope and accessible via authService + enablement of edit buttons in UI only after login