feat(rxTokenInterceptor): Allow exclusions for interceptor token

Closes #557

By default, don't send the X-Auth-Token to rackcdn.com requests. This
fixes the problem of browsers sending pre-flight OPTIONS requests
to the CDN when grabbing the navigation JSON file.

`rxTokenInterceptor` is now a provider, so the list of exclusion
domains can be customized at config time, via
`TokenInterceptor.exclusionList`
So @parlarjb found that angular uses this pattern in it's `$HttpProvider`.  

That being said, when the request function is executed, it's `this` scope is global space.  
It could be bound to the TokenInterceptorProvider instance using `}.bind(this)`.  Just, doesn't feel right.