- Allow users to consume this API from different devices. - POST /security/tokens creates a new token (used when users logs on) - DELETE /security/tokens/:token deletes specified token (used when user logs out)