Redo Auth, Use Http Interceptor Module

Routes are now protected by API responses, not defined in the javascript