title: CSRF protection in a Rest API
body: <p>I have a problem with <code>CSRF</code> implementation in a <code>Symfony REST</code> project. I'm using <code>AngularJS</code>, a <code>AuthToken</code> cookie is stored using <code>NG $cookie</code> service, and sended to server in every request in a <code>X-Auth-Token header</code>, the problem do I really need to implement a <code>CSRF</code> protection?
  Other question, if the answer was yes, how can I do that with <code>Symfony</code>? Because it store tokens in server sessions, which is not <code>RESTful</code>, what is the best method to implement a <code>Django</code> like <code>CSRF</code> system for example (I guess they store the <code>CSRF</code> token in a cookie and then compare it to the form input token?
  Sorry for my bad english, thanks!</p>