title: Forms authentication with hybrid mobile apps
body: <p>We are the process of developing a android phone app using IONIC framework and Web Api as the backend.
  My question is ,is it sufficient to use Forms Authentication along with SSL to keep the phone app secure.</p>
  
  <p>Our background is in Asp.Net web development and we could not see any examples that uses Hybrid mobile app development along with forms authentication,that makes me wonder if we are in the wrong track.</p>
  
  <p>We implemented CORS along with WithCredentials both on Angular and Web API side, and the authentication piece seems to work fine for all subsequent calls in debug mode. </p>
  
  <p>Do we need to take additional steps for security ,since its a phone app ?</p>
  
  <p>Edit: I was reading about bearer token authentication with Web Api, is this a recommended way to go with phone apps ?</p>
  
  <p>Thanks !</p>