add angular-side authentication and authorization