added X-Auth-Token to Access-Control-Allow-Headers in fhirnode.js
updated frontend to use angular-local-storage (testing)
Merge remote-tracking branch 'origin/develop' into develop