Angular auth

Implemented auth as described in #39 
I think we already prefix localStorage stuff for our own directives with "gnap", perhaps change this to 'security-token'?