This code works using `ionic serve` but not `ionic emulate android`

login.js

  var login = function(credentials) {
    var deferred = $q.defer();
    $http.post(loginEndpoint, credentials).then(function(response) {
      console.log("Login successful");
      localStorage.authToken = response.data;
      $http.defaults.headers.common.Authorization = 'auth-token ' + localStorage.authToken;
      $http.get(whoamiEndpoint).then(function(response) {
        self.user = response.data;
        deferred.resolve(response.data);
      });
    }, function(error) {
      console.log("Login failed");
      var errorString = JSON.stringify(error, null, 4);
      console.log(errorString);
      deferred.reject(error.data);
    });

    return deferred.promise;
  };

I get a failure under ionic emulate android, but it works using ionic serve just fine.

I do see a warning when running emulate:

26 604225 warn No Content-Security-Policy meta tag found. Please add one when using the cordova-plugin-whitelist plugin.