protectRoute(candidate: TraversalCandidate) {
   if (!tokenNotExpired()) {
     this.router.go('/login');
     return Observable.of(false);
   }
   return Observable.of(true);
 }

 canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot) {
   if (!tokenNotExpired()) {
     this.router.navigate(['/login']);
     return Observable.of(false);
   }
   return Observable.of(true);
 }

export const authorize = (to: ComponentInstruction, from: ComponentInstruction, params: Object = {}) =>
{
  let injector: Injector = appInjector();
  //let router: Router = injector.get(Router);
  let user$: Observable<User> = injector.get(UserService).user$
  let projects$: Observable<Array<Project>> = injector.get(ProjectsService).projects$

  // checks
  let authorized = false;
  let checkToken = tokenNotExpired(null, localStorage.getItem('token'))
  let checkRole$ = user$.map(user => user.role === 'admin' || user.role === params['checkRole'])
  let checkGroup$ = projects$
    .flatMap(project => project)
    .filter(project => project.url === to.urlPath)
    .zip(user$)
    .map(merged => merged[0].groups.map(projectsGroup => merged[1].groups.indexOf(projectsGroup) !== -1))
    .flatMap(merged => merged)

  Observable
    .merge(checkRole$, checkGroup$)
    .filter(check => check === true)
    .subscribe
    (
      (check: boolean) => authorized = check,
      err => console.error // maybe redirect to custom 4xx page here...
    )

  return new Promise((resolve) => resolve(checkToken && authorized))
}

 protectRoute(candidate: TraversalCandidate) {
   if (tokenNotExpired('auth_token')) {
     return Observable.of(true);
   } else {
     this._router.go('/login');
     return Observable.of(false);
   }
 }

  canActivate(next: ActivatedRouteSnapshot, state: RouterStateSnapshot) {
    if (tokenNotExpired()) {
      return true;
    }

    this.router.navigate(['']);
    return false;
  }

 loggedIn(){
   try {
     return tokenNotExpired('id_token');
   } catch(err) {
     this.logout();
     return false;
   }
 }

  canActivate() {
    if (tokenNotExpired()) {
      return true;
    }

    this.router.navigate(['/startPage']);
    return false;
  }

    private handleError(error:any) {
        if(!tokenNotExpired()) {
            console.debug("NOT LOGGED IN")
	    return Observable.throw(error);
        }
        error = error.json() ? {message: error.json().message, status: error.json().status} : error;

        console.error('An error occurred', error);
        return Observable.throw(error);
    }

 constructor(private http: Http, private router: Router, private _userService: UserService,
             private _projectService: ProjectsService)
 {
   this.date = new Date()
   //check whether the user has already logged in...
   if (tokenNotExpired(null, localStorage.getItem('token')))
   {
     this.defaultRedirect()
   }
 }

    canActivate() {
        // Check to see if a user has a valid JWT
        if (tokenNotExpired()) {
            // If they do, return true and allow the user to load the home component
            return true;
        }

        // If not, they redirect them to the login page
        this.router.navigate(['/login']);
        return false;
    }