change angular authentication from token to session based

token authentication is still part of the system and can be used for api
access