We do not need to call c.Next()
Only map if Get request
Do not set cookie or send header if api request
Set expire time after time before token generation to prevent a unlikley race condition
Fix mapping
Only send new token if cookie doe not already exist
Use regular express to validate domain pulled from r.Host
Adds angular example