This is key to preventing Cross-site request forgery. Basically you log in and do some work on one site, then go to a malicious site and now they can send POST requests to the sites you have authentication to. But by passing a token we can prevent that issue. The steps Make a token path Make a token service to use again and again in Angular.js Add it as a resolve to the route in Angular.
