Improving the organisation of the session handling:
There is now a session module that handles all access to the session id. The Auth header is automatically set by a $http interceptor and
the session is destroyed if a request fails with a 401.
Telling browsers not to scale the app.