title: CSRF in token based authentication
body: <p>We have a token based OAuth authentication mechanism for our angularjs application. The acunetix tool indicated that XSRF threat is there.</p>
  
  <p>Is CSRF an issue for token based authentication (Because we are not using any cookies for user identification / authentication / sessions)?</p>
  
  <p>If CSRF is an issue for token based authentication, is there be any way to implement prevention without using cookies?</p>