api access token creation
implement and test auth on the api
don't require access_token.  The clients would rather get an unauthorized error than a bad request error.
checkpoint on the client side auth.  working, needs tests.
feature specs for auth
refactored and reorganized the angular app
change content margins