https://auth0.com/blog/2014/01/07/angularjs-authentication-with-cookies-vs-token/
http://angularjs.cn/A0G3