Now, the app is stateless ... or should be.  This both includes UI and API calls.  Yes, not done - but getting closer.

A lot of this is based on (or inspired?)  on this project: https://github.com/philipsorst/angular-rest-springsecurity