auth service per http://angular-tips.com/blog/2014/05/json-web-tokens-examples/