Removed angular app from webapp.
Switched rest api to plain JAX-RS.
Implemented security mechanism which more or less is working.