node.js server api including user auth and acl with angular.js frontend