Authenticating AngularJS SPA with WebAPI and Auth0