title: Securing a Codeigniter Restful API accessed via Angular
body: <p>I am creating a Restful server using Codeigniter, that  will be accessed via a PhoneGap mobile app. I am not sure how to properly secure the API.</p>
  
  <p>I am using this REST library: <a href="https://github.com/chriskacerguis/codeigniter-restserver" rel="nofollow noreferrer">https://github.com/chriskacerguis/codeigniter-restserver</a></p>
  
  <p>This post was helpful, but I have questions: <a href="https://stackoverflow.com/questions/26303216/security-php-restful-api">Security PHP RESTful API</a></p>
  
  <p>I setup codeigniter to store sessions in a table. I have secured using SSL.</p>
  
  <ol>
  <li>Is a Session ID the same thing as a Token?</li>
  <li>Do I need to set anything manually in a Auth Header? If so whcih side? On the REST server or in Angular?</li>
  </ol>
  
  <p>I should point out that there are two facets to the app. One part behind a login, and one not. </p>