feat(rxTokenInterceptor): Allow exclusions for interceptor token

Closes #557

By default, don't send the X-Auth-Token to rackcdn.com requests. This
fixes the problem of browsers sending pre-flight OPTIONS requests
to the CDN when grabbing the navigation JSON file.

`rxTokenInterceptor` is now a provider, so the list of exclusion
domains can be customized at config time, via
`TokenInterceptor.exclusionList`
Could this use 'some' instead:
```
var exclude = _.some(exclusionList, function (item) {
    if (_.contains(config.url, item)) {
        return true;
    }
});
```