Can we for user friendliness ( not security ) reflect this change in the frontend, by using isLoggedin to hide/show the link and/or upon opening the controller instead of just showing 401 in console, actually show some message to the user ( yes there's a 'Sign in with google' link, but it's on all pages now ).

I haven't read that chapter in angular yet, but perhaps we can wack a 'auth' check into $routeProvider.when() the same we do here ?