use angular-client-auth, worked