fix authentication issues

change resource to use _httpKoast instead of $http, persist token on
page refresh