added authentication
refactoring navigation etc.
authentication tested with phone
access denied
maybe should use angularroute to prevent access
some eye candy
before merge