https://www.dotnetcodegeeks.com/2015/05/angularjs-feat-web-api-security.html