Access control using AngularJS interceptor