use latest angular-jwt version
use sessionStorage
make the jwt expire after 5 minutes