client side auth with angular