title: How to secure Rails API requests?
body: <p>I have an API only rails app and another angular app as frontend</p>
  <p>Currently I'm securing the API by sending X-APP-Token with each request on headers</p>
  <p>The other APIs which has logged in user has X-User-Token on headers as (JWT)</p>
  <p>My question here, with each request sent from angular, the token are exposed on headers and anyone can have access to them</p>
  <p>How can i secure these tokens from both front-end and back-end perspective ? like salting and encrypting so that if someone stole that token, it should be useless</p>
  <p>Thanks in advance</p>