https://chuckconway.com/posts/securing-angularjs-with-claims/