Authentication both on client and api

[api] - non-public functionality is now require authentication
[client] - replaced ngRoute with ui-route
[client] - each state is now configured with authorizedRoles
[client] - un-authenticated users will be redirected to login page